CVE-1999-0969: Medium severity Microsoft Windows NT vulnerability
The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
If the RPC service is not required, disable the Microsoft Windows NT RPC service to prevent processing of remote malformed RPC packets that can cause denial of service.
Microsoft Windows NT RPC service = disabled - Compensating control
Restrict or block RPC traffic from untrusted networks at the network perimeter or host-based firewall (allow only trusted hosts) to prevent remote attackers from sending spoofed malformed RPC packets that can trigger the vulnerability.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0969?
CVE-1999-0969 has a high severity rating due to its potential to cause a denial of service attack.
How do I fix CVE-1999-0969?
To fix CVE-1999-0969, apply the appropriate patches or service packs from Microsoft for Windows NT 4.0.
What systems are affected by CVE-1999-0969?
CVE-1999-0969 affects Microsoft Windows NT 4.0 and its various service pack versions.
What kind of attack does CVE-1999-0969 facilitate?
CVE-1999-0969 allows remote attackers to conduct denial of service attacks using spoofed malformed RPC packets.
Can CVE-1999-0969 create a network loop?
Yes, CVE-1999-0969 can potentially create a loop by generating error messages sent to the spoofed host.